diff --git a/app/scripts/views/fields/field-view-url.js b/app/scripts/views/fields/field-view-url.js
index 84fc631d..447e79f9 100644
--- a/app/scripts/views/fields/field-view-url.js
+++ b/app/scripts/views/fields/field-view-url.js
@@ -4,7 +4,7 @@ const FieldViewUrl = FieldViewText.extend({
     displayUrlRegex: /^http:\/\//i,
 
     renderValue: function(value) {
-        return value ? '<a href="' + _.escape(this.fixUrl(value)) + '" rel="noreferrer" target="_blank">' + _.escape(this.displayUrl(value)) + '</a>' : '';
+        return value ? '<a href="' + _.escape(this.fixUrl(value)) + '" rel="noreferrer noopener" target="_blank">' + _.escape(this.displayUrl(value)) + '</a>' : '';
     },
 
     fixUrl: function(url) {
diff --git a/release-notes.md b/release-notes.md
index e5398055..857bf1a7 100644
--- a/release-notes.md
+++ b/release-notes.md
@@ -2,6 +2,7 @@ Release notes
 -------------
 ##### v1.7.8 (2019-03-02)
 `-` fix #1124: keyboard navigation issues  
+`*` improved link security  
 
 ##### v1.7.7 (2019-02-09)
 `-` another attempt to fix focus issues